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Hexadecimal Code 


01 


02 


03 


04 


05 


07 


09 


0A 


DISK PACK ORDER CODES 


Function 


Write 

Read 2 

Seek 

Sense 

Check-write 

Reserve 

Header Write 

Header Read 

Condition Release Interrupt 

Read | 

Select Test Mode 

Release 

Condition Release Interrupt (and set a CIL on device release) 
Restore Carriage 

Seek (and cause a device interrupt on positioning complete or Seek timeout error) 


Restore Carriage (and cause a device interrupt on positioning complete) 
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Model 7277 Removable Disk Storage Unit 


1. GENERAL DESCRIPTION 


INTRODUCTION 


The Xerox Models 7275/7276 Removable Disk Storage 
System provides high-volume, random-access storage. It 
is a moving-arm (head), removable-medium, rotating disk 
system available for use with Sigma 5-9 computers. 


Model 7275 consists of a controller and three 86-million 
byte disk drives, providing a starter capacity of more than 
258 million bytes of storage. Model 7276 consists of a con- 
troller and seven 86-million byte disk drives. A maximum 
of 15 Model 7277 disk drives, each providing over 86 mil- 
lion bytes of storage, can be added to the system to allow a 
total on-line capacity of 1291 million (1 billion, 291 mil- 
lion) bytes of storage. The optional addition of one 
Model 1043 controller and a Model 1044 dual access fea- 
ture for each drive provides dual access to the system (see 
Chapter 4, "Dual Access Considerations"). The Model 7279 
disk pack, an 11-high, 19-surface disk pack is the remov- 
able storage medium. (See Table 1. ) 


To use this manual effectively, the reader must be familiar 
with the applicable Xerox Sigma Computer Reference 
Manual, particularly the discussions of input/output instruc- 
tions and input/output operations. 


The particular features of the removable disk system include 
the following: 


1. Voice coil head positioner — provides an average 
30 msec cylinder access time. 


2. Operation and failure interlock system — assures opera- 
tional system integrity. 


3. Dual access (optional) — allows simultaneous read/read, 
read/write, or write/write on any two spindles in a 
set of 15. 


4, Hardware write-protect — assures total file protection 
of the entire spindle. 


5. Independent Seek operations — allows overlapping of 


Seek operations to minimize access time on multiple 
spindle systems. 


SYSTEM COMPONENTS 


A system consists of some combination of the following 
components: 


Prerequisite 
Model No. Component Component 
7275 Disk controller with three 
86-million byte disk drive 
units, 


Model No. 


Prerequisite 


Component Component 


7276 Disk controller with 
seven 86-million byte 
disk drive units. 


1043 Additional controller 
allowing access of 7275/ 
7276 disk drives, if dual 
access feature is installed 
(optional). 


7275/7276 


1044 Dual access feature - one 7275/7276/ 
required for each 7277 
Model 7277 disk drive 
(optional). 


7277 Additional 86-million byte 
disk drive unit - maximum 
of 15 per 7275/7276 system 
(optional). 


7275/7276 


7279 Removable disk pack. 


Table 1. Characteristics 


Operating Characteristics 


1024 bytes/sector 
11 sectors/track 
404 tracks/surface! 


Recording format 


19 recording surfaces, plus one 
positioning servo surface. 


Recording method Track serial 


Mode 


Modified frequency modulation 


(MFM) 


6.45 Mhz 


Recording frequency 


Rotational speed 3600 rpm 


Model 7277 spindle 86, 048, 768 bytes 


capacity (sectored) 


On-line 7275/7276 


capacity (sectored) 


258/602 million bytes 


Minimum 


t 
There are an additional seven spare tracks per surface 
to be used only if the recording surface is flawed. 
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Table 1. Characteristics (cont. ) 


Operating Characteristics (cont. ) 


Maximum 1291 million bytes 
(15 additional 


units per 
controller) 


Nominal access 
(positioning) time 


Seek 30 msec average (10-55 msec) 


Rotational 


8.33 msec average (0-17 msec) 
latency 


Transfer rates 


Instantaneous 
(per sector) 


806K bytes/second 


Average 
(multiple sectors) 


Physical Characteristics 


675.7K bytes/second 


Model 1043 Controller 
(standard Sigma 
cabinet) 


Height 63.5 in. 


Width 31.5 in. 


Depth 35.5 in. 


Weight 770 lbs. 


Model 7277 disk 


drive 
Height 
Width 
Depth 


Weight 
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Table 1. Characteristics (cont. ) 


Environmental Characteristics 


Power requirements — 


Model 1043 120/208 vac, 60 Hz; three- 
phase, Requires 3737 watts 
power at a power factor of 0.7. 

Model 7277 208 vac, 60 Hz or 220 vac, 
50 Hz, three-phase, Re- 
quires 1.3 kw power at a power 
factor of 0.7. 

Operating 60° to YOPF (15° to 32°C) 

Temperature 

Operating 25% to 80% 

humidity 

(relative) 

Cable length 


IOP to controller} 40 ft. maximum 


Controller to 160 ft. maximum 


disk drives 


Operating and Physical Characteristics of Removable Volume 


Model 7279 disk pack 


Disks/pack 


Usable recording 
surfaces/pack 


Disk surface 
coating 


Magnetic oxide 


Disk surface 


diameter 


14 in. 


Disk pack 
canister 
diameter 


15 in. 


Disk pack 
canister height 


Weight 


2. FUNCTIONAL DESCRIPTION 


DATA PRESENTATION 


Data is transferred between the controller and the I/O 
system on a four-byte interface (32-bit data path). The 
four-byte feature must be installed on the IOP. All con- 
trollers time share and interface between the collective 
controllers and the IOP. Please note that throughout this 
manual, "IOP" refers to the Selector Input/Output Processor 
(SIOP) on Sigma 5-7 systems, and the Multiplexor Input/ 
Output Processor (MIOP) on Sigma 8 and Sigma 9 systems. 
(An SIOP operates on a single-byte interface.) Data is 
transferred between the controller and the disk pack unit 
serially, two bits at a time (i.e., via a two-bit data path). 


DISK SYSTEM STATES 


There are four device conditions and one device mode. 
The conditions are 


1. "Not operational". 
2. "Ready". 
3. "Busy". 


4. "Not available" (reserved for use with devices that 
are accessible to more than one controller). 


The mode is always automatic. Condition and mode com- 
bine to define device state, of which there are two: 


1. "Ready automatic". 
2. "Busy automatic". 


The initial state of the device depends on its power status. 
Complete absence of power removes the device from the 
controlling system (i.e., no address recognition). If power 
is applied to the controller, address recognition occurs 
when an I/O instruction is issued. 


For single CPU configurations, the disk pack system is 
always in "automatic release", as long as it is in the oper- 
ational state. When dual CPUs can access a device, the 
disk system is never in automatic release; see "Dual Access 
Considerations" in Chapter 4. 


OPERATIONAL STATES 
The disk pack system reports the "operational" state if the 
I/O address is recognized and the device is operational as 
defined below. 


1. Disk speed is within operating limits. 


2. Temperature is within operating limits. 


3. All interlocks are closed. 


4. All power is normal in the controller and disk storage 
units. 


5. No fault condition exists within a disk storage unit. 
When operational, an SIO instruction will be accepted if 


1. The addressed controller/device is ready. 


2. The device is "available", that is, not reserved by 
another controller. 


3. No channel interrupts are pending. 


In response to the SIO, HIO, and TIO I/O instructions, 
the condition of the disk pack system at any time is returned 
to the central processor. The TDV and AIO I/O instruc- 
tions obtain other specific indications of device status 
(see "Status Response" in Chapter 3). 


READY CONDITION 


In the "ready" condition, the controller can accept an SIO 
instruction if the addressed device is available and the 
system is free of pending channel interrupts. To become 
ready, the device must be operational and there must be 
no order execution in progress or pending. 


BUSY CONDITION 
In the "busy" condition, the controller has accepted an 


SIO instruction. It will not accept a new order until the 
current order (or orders) is completed. 


UNAVAILABLE CONDITION 
In the "unavailable" condition, the device is reserved by 


another controller; therefore, it cannot accept an SIO 
instruction. 


TRANSITIONS BETWEEN STATES 


Table 2 summarizes the state transitions and the event 
(events) required to cause them. 
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Table 2. Device State Transitions 


Ready automatic | Busy automatic Acceptance of 
SIO instruction. 


Busy automatic Ready automatic | HIO instruction 
| received, I/O 
Reset signal re- 
ceived, or oper= 
ation associated 
with last order 
completed. 


4 Data Transfer 


DATA TRANSFER 


An operation is initiated from the controlling system by an 
SIO instruction if the following qualifications are met: 


1. There is I/O address recognition. 


2. Device and controller are in "ready" condition, and 
no channel interrupt is pending. 


3. Device is "available". 


If these qualifications are met, the controller enters the 
"busy" condition and initiates the transfer of data to or from 
the disk pack unit as specified by the order. The data 
transfer continues until the required number of bytes have 
been transferred. The operation then terminates, and the 
device returns to the "ready automatic" state. 


3. PROGRAM INTERFACE 


DISK PACK ORGANIZATION 


Each disk pack (see Figure 1) consists of 11 disks with 

19 usable recording surfaces. (The outside surfaces of the 
top and bottom disks are not usable, and one additional 
surface is used as a positioning servo.) Each surface has 
its own read/write head mounted in a comb assembly on a 
movable arm; the 19 heads are aligned in the same vertical 
plane and move as a unit through the stack, although only 
one head is reading or writing at any time. Recording head 
numbers range from 0 through 18. 


Each recording surface is logically divided into 11 sectors 
numbered 0 through 10, and 411 concentric circles or tracks 
on which data is recorded. The tracks begin (are numbered) 
at the periphery of a disk and progress inward towards the 
center. Each vertically-aligned set of 19 tracks in the stack 
is referred to as a cylinder. Thus there are 411 cylinders in 
a disk pack, numbered 0 through 410. Cylinder 000, for 
example, consists of track 000 on surface 0, track 000 on 
surface 1, and so on through track 000 on surface 18. 


The range of values in the fields of the disk address are sum- 
marized as follows: 


Hiei, anges 
Cylinder 0-410, 
Head 0-18, 
Sector 0-10,, 


DATA ORGANIZATION 


Data is stored in groups of 1024 bytes. Each data group has 
a unique address composed of its device, cylinder, head, 
and sector number. Each data group is preceded by a header 
containing the cylinder, head, and sector number for 

the group. The header is used for address identification 
and verification. 


HEADERS 


Before data can be written on the disk, special records 
called headers that identify the addresses of all data groups 
(sectors) must be written. The header data received from 
the IOP (see "Header Write (X'09')", later in this chapter) 
comprises a flaw byte; head, sector, and cylinder addresses; 
and alternate head and cylinder addresses. 


Headers are used in locating the desired data group (sector) 
and in address verification when successive data groups are 
written or read. Failure to acquire a given address results 
in a verification error. When the program detects a flawed 
tracks, it must write a flaw mark (X'FF') in the flaw byte in 
all 11 sector headers of the track, A defective or flawed 
track is one in whichan errorhas been consistently detected 
on successive write and then read operations. When the 
controller detects a flaw mark in a header, it terminates 
any read or write operation by indicating "unusual end", 
Note that the current sector address is not incremented for 
any unusual termination while the header is being read. 
Therefore, the alternate head and cylinder addresses are 
normally obtained from the "flawed header" by issuing 
a Header Read order (see "Header Read (X'0A')", later in 
this chapter) directly after the flaw is encountered. A new 
Seek order is not required in this case. 


DATA ACCESS 


To select a device for any operation, the I/O instruction 
must contain an address specifying the device controller 
address and the device address. The Model 7275 is a multi- 
device controller; consequently, the controller address lies 
in the range 874 through F146, and device addresses in the 
range 014 through E1g. Note that device address Fy7¢ is 
for the controller and can be used for any I/O instruction 
intended for the controller alone (SIO, HIO, TIO, and TDV). 


To address a particular data group (sector) for reading or 
writing, the program must first issue a Seek order to the de- 
vice to select the desired cylinder (move the heads into 
place), head, and sector. After reading or writing a sector, 
the controller automatically increments the sector address 
to the next sector in sequence. Upon completing the last 
sector of a track, the controller sets the sector address to 
zero and increments the head address to the next head in 
sequence (in the cylinder). Thus a single I/O order can 
cause a number of sequential sectors or tracks to be read or 
written. When the end of a cylinder is reached, the pro- 
gram must issue a new Seek order to the controller to select 
the next cylinder, since the controller does not automati- 
cally increment to the next cylinder. 


CHECK CHARACTERS 


The controller computes and writes a two-byte check char- 
acter at the end of each header and at the end of each 
sector data field. When a header is read, the controller 
recomputes and compares the check characters with those 
read; any difference causes an "unusual end" termination. 
Similarly, when data is read, the controller also recom- 
putes and compares the check characters with those read; 
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Rotation 11 Sectors 


yee Sector 0 
Sector Sector 
7 Sector Sector 10 


8 


411 Cylinders 


0 

19 Surfaces, ' SASY, Sel 410 

19 Heads Siege Cylinder 409 

10 : 
Surface 0 Cylinder 1] 
: Cylinder 0 
Cylinder 1 

Surface 18 Cylinder 0 


Gap Data Preamble 


Header Preamble | Data (1024 bytes) 
Header Data (8 bytes) 


Data Parity (2 bytes) 


Data Postamble | 
Post Data Gap (longer on sector 10) 


Header Parity (2 bytes) — 
Header Postamble 
Post Header Gap 


"Data is not recorded on top or bottom surface, 


tf , . : 
Index mark is on index disk (not shown). 
or on positioning servo surface. 


Figure 1. Models 7275/7276 Disk Pack Organization | 


Disk Pack Organization , | 


however, in this case, the controller signals "transmission 
error" and not "unusual end". (See also "I/O Fault Detec- 
tion and Recovery Actions" in Chapter 4. ) 


DEVICE ORDERS 


When the controller successfully completes the execution 
of an SIO instruction or a command chain, it makes a one- 
byte order-out service call to the IOP to obtain the I/O 
order for the next operation. 


The following list shows order decoding of the I/O orders 
described in the subsequent sections. Any other code in 
the order byte is treated as an invalid order, as is a de- 
tected order parity error, and terminates with "unusual 
end", Note that all orders to device address X'F' (except 
in a Condition Release Interrupt order or a Select Test 
Mode order) are rejected. 


Binary Representation 


Bit Positions Hexadecimal 
Order_ 0123445 67 #£Code 
Header Write 00001001 ~ X'09! 
Seek M0O000001 1 X'83', X'03! 
Write | 00000001~— X'0I' 
Check-Write 00000101 ~— X'05' 
Header Read 00001010 = X'0A' 
Read 1 00010010 =— X'l12' 
Read 2 00000010 x02! 
Restore Carriage MO11001 1 X'B3', X'33' 
Reserve 00000111 X'07'! 
Release 0001011 1 X'17' 
Condition Release O O0O0O0M14142141~— X'IF', X'OF' 


Interrupt 
Select Test Mode 0001001 1 X'13! 


Sense 00000100 x'04' 


The "M" represents a modifier bit that, when set, has spe- 
cific indications for any order in which it can appear. 


HEADER WRITE (X’09') 


The Header Write order causes the controller to consider all 
subsequent databytes as header information. Header size is 
eight bytes. The header format is defined as follows: 


Byte 0 Byte | Byte 2 Byte 3 
noe [o— i] Grae [od 
0 12 314 5 6 71/0 1 2 314 §5 6 710 1 2 314 5 6 710 12314 5 6 7 
Byte 4 Byte 5 Byte 6 Byte 7 
0—0] Sector! Alternate Address 
: : 6 710 1 2 45 6710 1 2 314 5 6 710 12 314 5 6 7 
where 
flaw represents flaw byte and is written with all 


ones (X'FF') in every sector header of a track in 
which a flaw is detected. If there are no flaws, 
the flaw byte contains all zeros. 


cylinder represents current cylinder address. 
head represents current head address. 
sector represents current sector address, 


alternate address represents a field normally used 
to contain the address of an alternate cylinder 
and head to be used should this sector be marked 
flawed. (Set by software only. ) 


A single Header Write order can write a maximum of one 
cylinder of headers. Header writing continues until ter- 
minated by one of the following conditions: 


1. "Count done" is signaled. 


The device becomes "not operational". The Header 
Write terminates with an "unusual end". 


sad 


The address increments to an out-of-bounds address; 
the head number is past the end of the cylinder, The 
programming error (bit 2) status of TDV is indicated 
and the Header Write is terminated with "unusual 
end", 


> 


A rate error (data overrun) is detected. The operation 
terminates with a "transmission error". 


5. I/O Reset occurs or an HIO instruction is executed. 
The Header Write terminates without further communi- 
cation to the IOP. 


6. JOP Halt is indicated to the controller. If the terminal 
order indicating IOP Halt occurs prior to the order-in, 
the controller indicates "unusual end" in the order-in 
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and proceeds to the "ready" state. If the terminal 
order indicating IOP Halt occurs at the order-in, the 
controller proceeds to the "ready" state without further 
communication with the IOP. 


7, An output data parity error is detected from the IOP. 
The Header Write is immediately terminated with a 
"transmission error". 


8. Awrite-protect signal is received from the device. 
The Header Write terminates with an "unusual end". 


SEEK (X'83',X'03') 


The Seek order alerts the controller to request a four-byte 
disk address from the IOP, as illustrated below. The con- 
troller then directs any subsequent data transmission oper- 
ation to begin at this address. 

Byte 0 Byte 1 


Byte 2 Byte 3 


Cylinder Head Sector 


0 1 2 314 5 6 710 1 2 314 5 6 710 1 2 314 5 6 7lO 1 2 34 5 & 7 


where 


cylinder represents cylinder number and can be in 
the range 0 S cylinder < 410. 

head represents head number and can be in the 

range 0 S head <18. 


sector represents sector number and can be in the 
range 0 S sector S$ 10. 


Both seek forward and seek reverse operations are possible. 
The difference between any seek and successor seek is 
stored in bytes 14 and 15 of the data retrievable from 
the execution of a Sense order (see "Sense (X'04') later in 
this chapter). 


A byte count of less than four causes the controller to sig- 
nal "incorrect length" in the appropriate status byte for the 
I/O instruction, without completing the Seek operation. 
If the byte count exceeds four, the Seek operation is per- 
formed using the first four bytes transferred; however, 
"incorrect length" is still signaled. In either case, an 
"unusual end" termination occurs. 


When bit 0 (modifier bit) of the Seek order is set (X'83'), 

a device interrupt is initiated when the positioning system 
indicates positioning is complete (on-cylinder) or a Seek 
timeout error (i.e., positioning error — heads are retracted 
to sector zero) has occurred, The interrupt call is made at 
the beginning of the sector prior to the one specified by 
the Seek operation. If the call is not acknowledged before 
the beginning of the next sector, it is withdrawn until the 
next revolution of the disk. The receipt of an SIO, HIO, 
TIO, or TDV instruction for another device causes the 
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interrupt call to be withdrawn temporarily. However, if 
the controller is "busy" when the device signal is received, 
the interrupt call to the IOP is postponed until the con- 
troller is not "busy". 


Seek orders can be issued successively to several devices, 
and each device will interrupt as it completes its operation. 
After the controller has sent the last communication to the 
device to initiate the Seek operation, it executes order-in 
to the IOP, and proceeds to the "ready" state. The 
device then stays "busy" until the heads are in position, 
even though it is not selected by the controller. See also 
"Seek and Restore Operations" in Chapter 4. 


WRITE (X’01') 


The Write order causes the controller to begin writing — 
data on the file at the current disk (file) address. Note 
that if the specified byte count to be written is not a 
multiple of the sector record length, "incorrect length" is 
indicated and writing does continue. Writing begins only 
after the header is read and the address verified, and 
continues until terminated by any of the conditions listed 
below: 


1. Count done is signaled coincident with "end-of-sector" 
(i.e., after writing a record on a sector). 


2. Count done was received, the remainder of the sector 
was written with zeros, and the check character was 
written. 


3. I/O Reset occurs or an HIO instruction is executed. 
Writing terminates and the controller immediately be- 
comes "ready", without further communication with 


the IOP. 


4, A terminal order indicating IOP Halt occurs in the 
order-in sequence; the controller becomes "ready" 
without further communication with the IOP. 


5. An output data parity error is detected from the IOP; 
the operation terminates with "transmission error". 


6. A data overrun is detected; the operation terminates 
with "transmission error”. 


7, The disk system becomes "not operational"; termination 
indicates "unusual end". 


8. The controller head address increments past the end of 
the cylinder, The sector "unavailable" status bit 
(bit 2 of TDV status) is set to 1, and termination in- 
dicates "unusual end". 


9. A header flaw mark, incorrect header parity, or a 
verification error is encountered. The current sector 
address is preserved (is not incremented). Termination 
indicates "unusual end", 


oe 


«F 


oe 


10. A write-protect signal is received from the device; 
termination indicates "unusual end". 


11. A terminal order indicating IOP Halt occurred before 
* order-in; the controller indicates "unusual end" in 
the order-in and becomes "ready". 


CHECK-WRITE (X'05’) 


The Check-Write order causes the controller to compare 
bytes read from disk storage with bytes received from the 
IOP. Check-write errors terminate the operation with 
“transmission error" at the completion of the sector. Note 
that if the byte count is not a multiple of the sector 
length, “incorrect length" is indicated, 


The comparison continues until terminated by one of the 
following conditions: | 


1. Count done signal is received. 


2. The disk pack system becomes "not operational". 
Check-writing terminates with an "unusual end" 
indication. 


3. The address increments to an out-of-bounds address; 
the incremented controller head number is past the end 
of the cylinder. 


4. A rate error is detected; check-writing terminates with 
a "transmission error", 


5. Data bytes do not compare or an error is encountered 
in the data check character. The order-in indicates 
"transmission error", 


6. I/O Reset occurs or an HIO instruction is executed. 
Check-writing terminates and the controller proceeds 
immediately to "ready" without further communication 


with the IOP. 


7. IOP Halt is indicated to the controller. If the ter- 
minal order indicating IOP Halt occurs prior to the 
order-in, the controller indicates "unusual end" in the 
order-in and proceeds to "ready". If the terminal 
order indicating IOP Halt occurs within or after the 
order-in sequence, the controller proceeds to "ready" 
without further communication with the IOP. 


8. The controller encounters a flaw mark or incorrect 
header parity in a header, or a verification error, 
The current disk (file) address is preserved (is not 
incremented). 


9. The controller detects an IOP output parity error, 


10. An output data parity error is detected from the IOP; 
the operation terminates with "transmission error", 


HEADER READ (X’0A’) 


The Header Read order causes the controller to start reading 
headers beginning at the current disk address. The byte 
count must specify a multiple of the header record length. 
A maximum of 209 headers (one cylinder) can be read with 
a single Header Read order. 


The Header Read continues until terminated by one of the 
following conditions: 


1. Count done signal is received, 
2. The device becomes "not operational". The Header 
Read terminates with an "unusual end" indication. 


3. The address increments to an out-of-bounds address; 
the incremented controller head number is past the end 
of the cylinder. The illegal address fault (in byte 8, 
obtained with a Sense order) is indicated, and the 
Header Read operation terminates with "unusual end", 


4. A rate error is detected. The Header Read operation 
terminates with "transmission error. 


5. I/O Reset occurs or an HIO instruction is executed. 
Header Read terminates without further communication 


to the IOP. 


6. IOP Halt is indicated to the controller. If the terminal 
order indicating IOP Halt occurs before the order-in, 
the controller indicates "unusual end" in the order-in 
and proceeds to the "ready" state. If the terminal 
order indicating IOP occurs at the order-in, the con- 
troller becomes ready without further communication 


with the IOP. 


7, Detection of either a verification error or a header 
parity error terminates the operation with "unusual 
end" after the current record ("errored" header) has 
been transferred to the IOP with the current sector ad- 
dress preserved, 


8, Detection of a flaw mark sets bit 1 of the TDV device 
status byte and reading continues. 


READ 1 (X'12’) 


The Read 1] order causes the controller to begin reading 
bytes from the disk storage at the current disk address in 
the controller and to transmit the bytes to the IOP. Please 
note that data check byte errors are reported following the 
sector in which they occurred, Such errors are reported 
as "transmission errors" at I/O termination. Sector in- 
tegrity is determined from the check bytes written at the 
end of each sector. "Incorrect length" is set in the opera- 
tional status byte if the byte count is not a multiple of the 
sector record length. 
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Prior to reading data from the sector and sending it to the 
IOP, the controller verifies the disk address by reading 
headers until it locates the one with the requested sector 
number. If a flaw mark is detected in any header, if 
a check byte error is detected, or if cylinder, sector, 
or head numbers do not compare with those stored in 
registers, then an "unusual end" occurs and no data is 
read. The pertinent TDV status bits are set to indicate 
a flaw mark, header check byte error, or verification 
error (see Table 5), 


Reading is initiated at the start of the addressed sector and 
is Continued until any of the following occur: 


1. Count done signal is received coincident with the end 
of the sector and the check character has been read 
and compared, 


2. Count done signal is received prior to the end of the 
sector. The controller reads the remaining bytes 
(but does not transmit them to the IOP), and reads 
and compares the check characters. 


3. The disk pack system becomes "not operational”. 
Reading terminates with an "unusual end". 


4, The address increments to an out-of-bounds address; 
the incremented controller head number is past the end 
of the cylinder. 


5. A rate error (data overrun) is detected. Reading ter- 
minates with a "transmission error". 


6. The controller encounters a check character that does 
not successfully compare. Termination occurs at the 
end of the sector in error (for the Read 1 order de- 
scribed in this section, or is deferred until the count 
done signal is received, as described below for Read 2). 
At read termination, "transmission error" and not "un- 
usual end" is set in the appropriate status byte for the 
I/O instruction. 


7. V/O Reset occurs or an HIO instruction is executed. 
Reading terminates and the controller proceeds imme- 
diately to "ready" without further communication with 


the IOP. 


8. IOP Halt is indicated to the controller. If the terminal 
order indicating IOP Halt occurs prior to the order-in, 
the controller indicates "unusual end" for the order-in 
and proceeds to "ready" without further communication 


with the IOP. 


9. A verification error is encountered, The read opera- 
tion is terminated with "unusual end", and the current 
file address is preserved (is not incremented). 


10. The controller encounters a flaw mark or incorrect 
header parity in a header. The read operation is ter- 
minated with "“unusal end" and the file address is 
not incremented. 
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READ 2 (X'02') 


The Read 2 order causes the controller to read and transmit 
bytes to the IOP from the disk storage at the current disk 
address in the controller. Sector data check byte errors 
are reported following the sector in which count done 
occurs. Otherwise, the operation is exactly as described 
in the previous section, "Read 1 (X'12')". 


RESTORE CARRIAGE (X'B3’,X'33') 


The Restore Carriage order causes the controller to issue a 
return-to-zero signal to the addressed device; it is generally 
used when the exact location of the carriage becomes un- 
known. Internal registers are cleared, the heads are re- 
turned to cylinder zero, and no data bytes are transferred. 
An interrupt call is made at the beginning of the sector 
prior to sector zero if the order modifier bit is set (i.e., 
order code is X'B3'), A device interrupt is initiated when 
positioning is complete. (See also "Seek and Restore 
Operations" in Chapter 4. ) 


RESERVE (X’07) 


For a single-CPU system, the Reserve order causes the con- 
troller to select and reserve the designated device and then 
to release it, For a dual-CPU system, this order causes the 
responsible controller to select and reserve the designated 
device. Because an SIO instruction and all orders cause 
the controller to automatically select and reserve a device, 
the use of the Reserve order is superfluous. (See also "Dual 
Access Considerations" in Chapter 4. ) 


RELEASE (X’17) 


The Release order causes the controller to issue a release 
control signal to the addressed dual access device, thereby 
releasing that device for use by the other controller. If 
the device has only a single access capability (i.e., re- 
mains reserved to channel A), the controller still executes 
the Release order; however, no useful operation results. 
(See also "Dual Access Considerations" in Chapter 4. ) 


CONDITION RELEASE INTERRUPT (X‘1F’.X'OF') 


The Condition Release Interrupt order is meaningful only 
for dual access systems. When a controller receives a "re- 
leased" signal (which means the other controller has re- 
leased the device), a device interrupt occurs. If the order 
modifier bit is set (i.e., order code is X'1F') a controller 
makes an interrupt request (CIL) if it receives a "released" 
signal from any device. If the modifier bit is notset (X'OF'), 
a controller does not generate any release interrupts. 


The program must use SIO device address X'F' to initiate 
this order, thereby permitting the Condition Release Inter- 
rupt mark in the controller to be set even if all devices are 


busy. 


An HIO instruction with device address X'F' resets the 
release interrupt mark and any pending release interrupts. 
A reset signal received from the IOP also resets the release 
interrupt mark. 


SELECT TEST MODE (X'13') 


For diagnostics only. The Select Test Mode order alerts 
the controller to request two bytes of data from the IOP 
and puts the controller in test mode. The first data byte, 
byte 0, specifies the test mode (or modes) and forced error 
conditions under which subsequent operations will be per- 
formed. The second data byte, byte 1, is a test byte 
that specifies the device type and the device diagnostic 
conditions. 


Byte 0 
Bits 
01234567 


Function 
00000000 Invalid test order. 

Enter buffer test mode. 

Enter controller test mode. 

Enter device test mode. 

Enter incremental clock test mode. 


Force device I/O parity error. 


Force read data error. 


Force IOP input parity error. 


Force IOP output parity error. 


Byte 1 
Bits Function 
0-4 Diagnostic test condition for the device. 


5-7 Device type code: The bits will be set to 111 (710) 
for this disk drive. Required only for controller 
test mode. 


The Select Test Mode order must be issued with device 
address X'F' (the controller address). The controller can 
be released from test mode by an HIO instruction or by 
manual reset. 


BUFFER TEST MODE 


Buffer test mode allows testing of the data path between 

the IOP and the controller. The 32-byte controller buf- 
fer can be filled by a Write order and read back to the IOP 
by a Read order. The controller indicates end-of-data after 
the 32nd byte has been transferred. By using controller 
address X'F', no device is necessary to execute buffer test 
mode tests. 


CONTROLLER TEST MODE 


Controller test mode allows testing of the controller without 
operating a device, This mode tests approximately 90 per- 
cent of the controller logic. All subsequent orders can 

be exercised in a normal or incremental clock mode; 
control signals to the device are blocked, For data-in 
type operations the byte counter simulates data; for write 
(data-out) operations the written data are lost. By using 
controller address X'F', no device is necessary to execute 
controller test mode tests. 


DEVICE TEST MODE 


Device test mode provides a means for performing special 
diagnostic tests of the device and controller. All normal 
interface and controller sequences are operative except 
that the device nonoperational state does not cause se- 
quences to be terminated with "unusual end", nor does it 
prohibit use of an SIO instruction. These exceptions allow 
status to be collected from the device and device commands 
to be issued to the device while the device is nonoperative. 
The controller can be operated in an incremental clock 
mode, thereby allowing the diagnostic program to check 
each phase of a Seek operation as it occurs. 


Note that in the device test mode, “implicit reserve 
and explicit release" is in effect for the controller, thus 
allowing the diagnostic program to test "implicit reserve 
and explicit release" without actually installing a ground 
jumper (on pin 06C44) to disable the automatic "implicit 
reserve and explicit release" feature. (See "Dual Access 
Considerations" in Chapter 4. ) 


INCREMENTAL CLOCK TEST MODE 


Incremental clock test mode allows the program to step 
through the controller sequences by issuing TDV instruc- 
tions. This feature allows the diagnostic program to take 
snapshots of controller and device responses to normal oper- 
ating sequences. Each TDV with an X'F' device address 
advances the sequence one step. All other TDV device 
addresses operate in the normal test mode as described in the 
section "TDV Instruction in Test Mode", later in this chapter. 


FORCE DEVICE I/O PARITY ERROR 


This feature allows a diagnostic program to test the address 
decoding logic and error reporting of any device. A "one" 


Device Orders iT] 


in bit 3 of the test byte (byte 0) forces a parity error in the 
output address lines to the device. 


FORCE READ DATA ERROR 


This test feature allows testing of the controller's check 
byte (parity) generation and detection, and its reporting 
logic. A "one" in bit 2 of the test byte forces a one-bit 
error in a read operation. Bit positions 0 and 1 of the first 
byte of any sector being read is forced to a "zero" state. 
This condition occurs for either simulated data (Controller 
Test Mode) or data from the device (Device Test Mode). 
The forcing of data errors exercises the parity logic in the 
controller; a check byte error detection may be exercised. 


FORCE IOP INPUT PARITY ERROR 


This feature allows a diagnostic program to test the control- 
ler's parity generator and computer reporting logic. A 
"one" in bit 1 of the test byte forces a zero on the parity 
line to the IOP. 


FORCE IOP OUTPUT PARITY ERROR 


This feature allows a diagnostic program to test the con- 
troller's parity checking and reporting logic for data trans- 
fers from the IOP. A “one" in bit 0 of the test byte forces 
the simulation of a "one" on the parity line from the IOP. 


‘ 


TDV INSTRUCTION IN TEST MODE 


During the period the controller is in test mode, the TDV 
instruction becomes a diagnostic instruction that allows 
the CPU to monitor controller and device operations and 
to issue certain diagnostic device commands. The least 
significant four bits of the device address portion of the 
instruction points to the data source to be transferred to 
the IOP during the TDV. Device addresses 0 through B 
are used for diagnostic device commands if the controller 
is in Device Test Mode. In this case the address and status 
buses from the device are monitored for status. The actual 
device operated and tested in Device Test Mode is the one 
addressed by the last SIO, TIO, or HIO instruction. If 
the controller is in the Controller Test Mode, no communi- 
cation to the device occurs. | 


A detailed discussion of the use of TDV under test condi- 
tions is beyond the scope of this manual. Note that should 
a program accidentally get into test mode due to a hard- 
ware error or a programming error, Condition code bits | 
and 2 (CCl and CC2) have the values 0 and 1, respectively, 
in all responses to TIO and TDV. 


SENSE (X’04') 


The Sense order causes the controller to transfer to the IOP 
up to 16 bytes of information that describe the controller's 
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and device's current state. The sense orders are timed to 
be initiated at the start of a sector. This feature provides 
that approximately the time of one sector period elapses 
before the start of the next sector after the current angular 
position (sector position) is transferred to the IOP. The 
16 bytes are described as follows: 


Byte 0 Byte | Byte 2 Byte 3 


jo—o] cinder [000 | Heed | 000] sector 


0 12 314 5 6 710 1 2 314 5 6 710 1 2 314 5 6 710 12 314 5 6 7 


fee | 


Byte 4 Byte 5 | Byte 6 


Angular . ; . 
gee Configuration} Device Status 


0 12 314 5 6 7/0 1 2 314 5 6 710 1 2 314 5 6 710 1 


Byte 7 


=| 


2 314 5 6 7 


Byte 8 Byte 9 Byte 10 Byte 11] 


0 1 2 45 6 Oo 1 2 314 5 6 710 1 2 314 5 6 710 1 2 314 5 6 7 


Byte 12 Byte 13 Byte 14 Byte 15 
0 1 2 314 5 6 710 12 314 5 6 O04 2 314 35 6 FAO VY 2 314 5 6 7 


where 


WwW represents write-protect bit. If set, this bit in- 
dicates the current address is write-protected. 


cylinder represents current nine-bit cylinder address 
stored in the device. 


head represents current head address stored in the 
device. 
sector represents current sector address stored in 


the device. 


M represents modifier bit. This bit is set when 
the arm is in motion. In this case, the file is 
inaccessible. 


R represents reserve/release mode. Bit 1, if set, 
indicates that “implicit reserve, explicit release" 
is in effect, and if reset (zero) indicates "implicit 
reserve and release" is in effect. (See "Dual Ac- 
cess Considerations" in Chapter 4. ) 


- angular position represents current angular posi- 
tion — a sector number. When angular posi- 
tion equals sector address, the data file can be 
accessed, 


configuration represents configuration data. Bit 0, 
if set, indicates the addressed device has the dual 
access feature. Bits 1-3 contain the device type 
code, i.e., 1115 for this disk drive. Bits 4-7 
contain the device physical address, which may 
differ from the logical address. | 


ie tag 


ve 


device status 


received from the device, as listed below. 
Bit Meaning 


0 Device fault (voltage drop occurred). 
I Write fault. 
2 Head positioning fault (loss of on-cylinder). 


3 Offset polarity (used for checking head 
alignment). 


4 Air flow loss occurred. 


Parity error detected on device ID byte sent 
from controller. 


6 Spindle speed fault. 


Positioning servo fault. 


faults these two bytes contain diagnostic fault data 


that is described below. This information is con- 
tained within the controller and indicates various 
faults that resulted in "transmission errors" or 
"unusual end" terminations. These data are ac- 
cumulative and are cleared only by execution of 
this Sense order or by manual reset. 


Byte Bit Meaning 


8 0 Check-write error. 

8 1 Data check byte error. 

8 2 IOP parity error. 

8 3 Rate error (data overrun). 

8 4 Head address incremented out of 
limits while attempting a Read or 
Write order. 

8 5 Arm in motion error — Seek order 
received while device arm in 
motion, 

8 6 Order parity error detected. 

8 7 Test mode order error — invalid 


test mode or incorrect length of 
test data bytes. 


9 0 Seek address transfer verification 
comparison error detected during 
Seek, Read, Check-write or Write 
order, 


9 . 1 Device "unavailable" operational 
error or "not operational" signal 
detected from device by the con- 
troller, or seek error during Read 
or Write sequence. 


represents the diagnostic device status 


Byte Bit Meaning 


9 2 Head address verification error 
detected, 

9 3 Sector address verification error 
detected. 

9 4 Cylinder address verification error 
detected, 


9 5 Not defined. 
9 6 Channel address error detected. 


9 7 Missing on-sector signal from device 
during multisector Read or Write op- 
eration; or missing read or write 
clock, command strobe, or status re- 
quest acknowledgement from device. 


Seek modifier bits represent either Seek modifier 
bits, or Restore Carriage modifier bits. Bit 0 of 
byte 10 represents device address 0 and bit 6 of 
byte 11 represents device address X'14'. A "one" 
set in any bit position means an interrupt is pend- — 
ing when the device reaches "on-cylinder" (posi- 
tioning is complete) or Seek timeout. 


Check bytes represent the last check bytes received 
by the controller from any device. 


difference represents the difference (absolute value) 
last computed by the controller during a Seek 
order execution. The least significant bit is bit 7 
of byte 15. 


KEY EVENTS 


The following key events can occur during a disk I/O 
operation: 


1. Start of 1/O 

2. Unusual end error condition. 

3. Channel end error condition. 

4. Transmission error condition. 

5. Incorrect length error condition. 


These key events are described in the following sections. 
Assume no chronological order of occurrence from the order 
here presented, for none is intended. For what generally 
occurs is that I/O is started, and sometime subsequently 
terminated with an interrupt. The interrupt is queried to 
determine whether it was device-generated (and indicating 
successful completion) or generated because of an error 
(unsuccessful termination), or by a timeout occurrence 
(hardware malfunction — generally recoverable). 
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START INPUT/OUTPUT 


An I/O operation begins with the execution of an SIO 
instruction by the controlling system. If the I/O address 
is recognized and the device is "ready" and "available", 
the controlling system sets its "I/O address recognition" 
and "SIO accepted" indicators. The device advances 
from the "ready" to the "busy" condition. It then requests 
an I/O order byte from the controlling system and proceeds 
with the operation defined by the order byte. 


UNUSUAL END CONDITIONS 
Unusual end always results in a TDV status bit being set to 
indicate a means of recovery. After an order is received, 
the detection of any of the following conditions causes the 
device to signal "unusual end" to the controlling system: 
1. An out-of-range or illegal Seek address. 
2. Receipt of Seek order while arm in motion. 


3. Invalid order or order parity error. 


4. Device becomes "not operational" while the controller 


is "busy". 

5. Incorrect header parity, or a verification error for 
devices that use headers during a Read, Write, Check- 
write, or Header Read order operation. (The current 
address is not incremented. ) 


6. IOP Halt signaled. 


7, Flaw byte encountered during a Read, Write, or Check- 
write order operation. 


8. Seek timeout (positioning error) occurs when controller 
receives a Seek, Read, Write, Check-write, Header 
Read, or Header Write order. 

9. Incorrect length on Seek, Header Read, or Sense order. 

10. Device interface error detected by controller. 


11. Write-protect violation. 


12. Control signal or address IOP parity error. 


' CHANNEL END CONDITIONS 
"Channel end" is signaled with each order-in. The order-in 
takes place after the occurrence of any of the following 
conditions: 


1. "Count done" signal received during a Sense order. 


2. The controller executes a Seek order to a device, 
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3. The check character bytes are written in the last sector 
for a Write or Header Write order following a "count 
done" signal, 


4, Receipt of check character bytes of the last sector of 
a Header Read or Check-write order following a "count 
done" signal, 

5. Receipt and execution of a Restore Carriage, Release, 
Select Test Mode, or Condition Release Interrupt 
order. 

6. Detection of an JOP data~out parity error, 


7. Detection of data overrun (rate error), 


8. After reading the check bytes during a Read 1 or 
Check-write order that has a "transmission error". 


9. Detection of an "unusual end" condition. 


TRANSMISSION ERROR CONDITIONS 


The controller signals "transmission error" to the controlling 
system upon detecting any of the following conditions: 


1. Failure of an end-of-sector check bytes check during 
a Read or Check-write operation. 


2. Failure of data comparision during a Check -write 
operation, 


3, Data overrun (rate error). 


4. An IOP data-out parity error. 


INCORRECT LENGTH CONDITIONS 


The controller detects "incorrect length" errors and reports 
them to the controlling system for any of the following 
conditions: 


1. A byte count other than four was specified in a Seek 
order, 


2. A byte count other than an integral multiple of the 
sector data record (1024 bytes) was specified for a 
Read, Write, or Check -write order. 


3. A byte count other than a multiple of the sector header 
record (eight bytes) was specified for a Header Write 
or a Header Read order. 


4, A byte count of 0 or greater than 16 was specified for 
a Sense order. 


js 


STATUS RESPONSE 


The I/O instructions can request a device to return detailed 
I/O status information when the instruction is executed. 
Detailed descriptions of the Sigma I/O instruction are in 
the Sigma Computer Reference Manuals; summary status in- 
formation is discussed in the following sections and related 
tables and figures. 


CONDITION CODES 


When an I/O instruction is executed, condition code bits 1 
and 2 are set to describe the general status of the addressed 
I/O device and controller. (Condition code 3 is also 
meaningful for an I/O instruction; when set, it means 
either the status returned in the registers is not reliable or 
the status has not been returned to the registers; when reset 
(zero), it means the status information is reliable. Note, 
however, that the device and controller do not influence 
CC3 —the IOP does.) Table 3 lists the CCl and CC2 set- 
tings and their significance for the I/O instructions. 


Table 3. Condition Code Settings 


I/O address recognized and SIO 
accepted. 


//O 


Instruction 


I/O address recognized, SIO 


not accepted, 


Not applicable. 


I/O address not recognized, 


I/O address recognized and 
device not "busy" when halt 
occurred, 


I/O address recognized and de- 
vice "busy" when halt occurred. 


HIO not accepted; controller 
"busy" with device other than 
one addressed. 


I/O address not recognized. 


I/O address recognized and SIO 


can currently be accepted. 


I/O address recognized, but SIO 


cannot be currently accepted. 


Not applicable. 


I/O address not recognized. 


Table 3. Condition Code Settings (cont. ) 


VO | 
Instruction | CC1 | CC2 | Significance 


I/O address recognized. 
Device controller in test mode. 


Controller busy with a device 
other than one addressed. 


I/O address not recognized. 


Normal interrupt recognition. 
Unusual condition’, interrupt 
condition, or controller is 
switched to a test mode. 


Not applicable. 


No interrupt recognition. 


t e e * e e e 

An unusual condition is one in which the Seek timeout 
error, unusual end, or transmission error storage elements 
were set in the previous operation. 


DEVICE STATUS BYTE 


A device status byte is returned to the register when an I/O 
instruction is executed. This byte also describes the status 
of the addressed device and its controller, but in more de- 
tailed fashion than do CCl and CC2._ The significance of 
each bit is shown in Tables 4, 5, and 6. 


The device status byte is set at the beginning of an SIO, 
TIO, or HIO instruction. It is set as the result of a TDV 
instruction. For an SIO, it is set upon receipt of the 

instruction if there is an interrupt pending. 


OPERATIONAL STATUS BYTE 


In addition to the information returned in the device status 
byte, the operational status byte generated at the end of 

each SIO, HIO, TIO, and TDV instruction execution also 
provides indicators to the controlling system (see Table 7). 


-10P STATUS BYTE 


In place of an operational status byte, an AIO instruction 
returns an IOP status byte in the same bit positions of the | 
register. Table 8 summarizes the meanings of the settings 
of these bit positions. 


Status Response 15 


Table 4. Device Status Response for SIO, HIO, and TIO 


Bit 
. : : : a — 


Interrupt pending Set if interrupt is pending (issued, but not acknowledged by an 
AIO instruction). 


Device condition Describes the current device condition as follows: 


Device "ready". 
Device "not operational". 


Device "unavailable" (reserved by other controller). 


Device "busy". 


Mode Always set to automatic mode. 


Unusual end Set if previous controller operation terminated with "unusual 
end". 


Controller condition Describes the current controller condition as follows: 


Controller "ready". 
Controller "not operational". 
Not applicable. 


Controller "busy". 


Reserved This bit is currently zero; however, it may be used in future 
enhancements. 


Table 5. Device Status Response for TDV 


Bi t 


Reserved This bit is currently zero; however, it may be used in future 
enhancements. 

Flaw detection Flaw byte detected during Header Read, Write, Read, or 
Check-write. 

Programming error Invalid order detected; illegal address (address X'F' used for 


orders other than Select Test Mode or Conditional Release 
Interrupt); invalid Seek address; address incremented out of 
limits while attempting a Read or Write order; invalid test 
mode; Seek order received while arm was in motion; first 
seven bits of Seek order were not zero; or incorrect length 
detected for Seek, Sense, Header Read, or Header Write order. 


Write protection Write-protect violation. 


Parity error (IOP) Order parity error detected; Seek address parity error detected; 
even parity received on a terminal order; or IOP detected an 
address parity error (channel address parity error). 
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Bit 
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Table 5. Device Status Response for TDV (cont. ) 


Bi t 


Operational Error 


Verification 


Header check byte 


Meaning 


Device interface error detected; missing an on-sector signal from 
device during a multisector Read or Write; missing Read or Write 
clock, command strobe, or status request acknowledgment from the 
device; detection of Seek address transfer verification comparison 
error during Seek, Read, or Write; device unavailable error or 
"not operational" signal detected from device by the controller; 
or a Seek error during a Read or Write. 


Head address verification error detected; sector address verification 
error detected; or cylinder address verification error detected while 


reading a header. 


Header check byte error. 


Table 6. Device and Controller Status Response for AIO 


Data overrun 


Attention interrupt 
Release interrupt 


Reserved 
On-sector interrupt 
Reserved 


Seek timeout error 
interrupt 


Reserved 


Meaning 


Data overrun (rate error) has occurred during execution of the 
previous order. 


Attention interrupt acknowledged. 
Release interrupt acknowledged. 


This bit is currently zero; however, it may be used in future 
enhancements. 


On-sector interrupt acknowledged. Note that either bit 4 or 
bit 6 can be set; both cannot be set. 


This bit is currently zero; however, it may be used in future 
enhancements. 


Seek timeout error interrupt acknowledged. See note for bit 4. 
If bit 6 is set, program must issue a Restore Carriage order and 
retry the previous operation. 


This bit is currently zero; however, it may be used in future 
enhancements. 


Table 7. Operational Status Byte for SIO, HIO, TIO, and TDV 


Incorrect length 


Transmission data 
error 


Transmission memory 
error 


Incorrect length condition has occurred. 


IOP or controller detected a parity error or data overrun in the 
transmitted information. 


Memory parity error detected during a data I/O operation since 
last accepted SIO. 
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Table 7. Operational Status Byte for SIO, HIO, TIO, and TDV (cont.) 


Bit | 


Memory address Nonexistent memory address detected during a chaining operation 
error or a data I/O operation. 


IOP memory IOP detected a memory parity error while fetching a command. 
error. 


IOP control IOP detected two successive Transfer in Channel commands. 
error 


IOP Halt An error condition is detected that causes the IOP to issue a halt 
order to the addressed I/O device. 


STOP busy Always zero for I/O instruction addressed to an MIOP. 


Table 8. IOP Status Byte for AIO 


Incorrect length Incorrect length condition has occurred. 


Transmission data IOP or controller detected a parity error or data overrun in trans- 
error mitted information. | 


Zero byte count Zero byte count is detected and zero byte count flag is set. 
interrupt 


Channel end Device reports channel end to the IOP and the channel en 
interrupt flag is set. 


Unusual end IOP reports unusual end to the device and the unusual end flag is 
interrupt set; or the IOP signaled IOP Halt to the device controller. 


Not assigned Setting is indeterminate; program should mask these bits. 
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4. PROGRAMMING CONSIDERATIONS 


SEQUENCE OF ACTIVITY 


Figures 2 through 16 summarily illustrate the sequential 
relationship of the main events that occur during disk pack 
operations. 


COMMAND CHAINING 


Command chaining is allowed during the intersector gap for 
changing the order or file address from one type to another, 
or another order of the same type. Loss of rotational 
latency may be avoided only if command chaining occurs 
between sectors 10 and 0. Chaining from a Read or Write 
to another Read or Write is not allowed if the end of the 
cylinder has been reached. At the end of a cylinder, a 
Seek or Restore Carriage order must be given before addi- 
tional data can be transferred. - 


SURFACE FLAWING 


When the program determines that a sector's data field is 
unusable because of a defective surface area, it must write 
flaw marks in the headers of the sectors of the associated 
cylinder and head where flaws are detected. (Note that 
the controller is designed to flaw single sectors.) The use 
of the alternate cylinder and head assignments fields of 
these headers is, of course, optional. 


SURFACE OPERATIONS 


Sector and head addresses are automatically incremented 
after a surface operation (Read, Write, etc.); however, the 
cylinder address is never automatically incremented. The 
program must issue a Seek order to cross cylinder boundaries 
to prevent an "unusual end" condition. 


When the controller detects a flaw mark during a surface 
operation, automatic surface address incrementation is in- 
hibited to allow for an immediate Header Read operation to 
obtain the alternate address. 


Note that frequent TIO and TDV instructions during surface 
operations may cause data overrun conditions. 


SEEK AND RESTORE OPERATIONS 


The Seek operation can be performed only when the disk is 
on-cylinder. When the Seek modifier bit (bit 0) is set, an 
interrupt occurs when the minimum access position is 
reached. The interrupt can be used to maximize controller 
activity. When the modifier bit in a Restore Carriage 


order is set, an interrupt occurs when the head has com- 
pleted movement thereby avoiding having to issue Seek or- 
ders during head movement. When Seek or Restore Carriage 
orders with the modifier bit set occur in a command list, the 
modifier bit is ignored and the on-sector interrupt is lost. 


The on-sector interrupt has a window that is one sector 
ahead of the addressed sector. Thus it is possible for 
the condition code bits CCl and CC2 of an AIO instruction 
to be set to a binary 11 configuration, indicating that no 
interrupt was recognized. 


DUAL ACCESS CONSIDERATIONS 


There are two types of dual access configurations possible: 


a single CPU with two controllers sharing a device or de- 


vices; and dual CPUs sharing a device or devices, each 
through a separate controller and with no status communica-~ 
tions shared between the CPUs. 


In the first case (single CPU), the disk system is always in 
automatic release and "implicit reserve and release" is in 
effect. This means that the device is always selected and 
reserved upon acceptance of an SIO instruction, and is not 
released until the controller goes "ready". Please note that 
it is not released during command chaining or data chaining. 
For the Restore Carriage order and Seek order, the control- 
ler automatically releases the device when the carriage 
first starts movement. This is when the controller is "ready" 
for another SIO; the device goes "on-cylinder" some time 
later. For other operations the controller automatically re- 
leases the device at the completion of each operation (at 
the time the controller goes "ready"). If a channel program 
is used that includes Seek and Read or Write orders, the de- 
vice remains reserved throughout the operation; if a regular 
program is used that issues an SIO for each Seek and Read 
or Write order, the device is released between orders at 
channel end. Thus the Reserve and Release orders are not 
required and are effectively no-ops. If the Reserve and 
Release orders are used, they operate in this manner: an 
executed Release order first reserves the device and then 
issues a release. 


In the second case (dual CPUs) the disk system is not in the 
automatic release and “implicit reserve, explicit release" is 
in effect. This means that the acceptance of the first SIO 
from either controller causes the pertinent controller to se- 
lect and reserve the device, and that all orders automati- 
cally reserve the device. Thus the Reserve order is not 
required and is effectively a '"no-op". The device remains 
reserved and must be explicitly released by some action: 
execution of a Release order, manual depression of 1/O 
RESET or SYS RESET pushbuttons on the CPU control panel, 
switching of the reserving controller to off-line, or by power 
failure or shutdown in the reserving controller. The release 
interrupt is used to control the availability of the device to 
the two systems. 
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CONTROLLING SYSTEM ACTIONS DISK STORAGE SYSTEM ACTIONS 


Execute SIO instruction. 


lot ) 
1/O address \ 
recognition? no Power 
failure? 
yes nN Return to "ready" 
: yes U.E condition and wait 
Set "no I/O address / \ Nw for next SIO. 
recognition" indicator. ULE. 
anny no 


"Ready" 
condition with no 
controller interrupt 
pending ? 


no Set "SIO Advance to "busy" Request and receive order byte 
accepted” indicator. condition. from controlling system. 
Select and 
reserve device. 


“on™ 

Volid order? U.E. 
no 

NU” 


yes 


Set "SIO not 
accepted” indicator. 


Set Unusual Signal “unusual end" 
End indicator. to controlling system. 


Signal “data 
transmission error" 
to controlling system. 


a 
La 
a | Signal “incorrect length" Kos 
| to controlling system. ny 
| S 
7 
HEADER 
ves WRITE 
no 


Set Transmission Data aed 
Error indicator. 


Set Incorrect 
Length indicator. eset 


Signal “channel end" 
to controlling system. 


Set Channel 
End indicator. iene aid 


RESTORE 


INTERRUPT 


Figure 2. Controlling/Disk Storage System Actions 


20 Sequence of Activity 


 ) 


& 


Fast Access 
Memory (FAM) 
empty ? 


no 
Request controlling system 
to accept bytes. 
Terminate operation at 
end of sector. 


Note: READ, SENSE, and HEADER READ 
are Data In operations. 


Figure 3, 


Select and 
reserve addressed 


device. 


Release 
device. 


Figure 4. Reserve Order 


RESTORE 
CARRIAGE 


Clear address registers. 


Release addressed device. 
Start device arm - 
to cylinder zero. 


Figure 5. Release Order Figure 6. Restore Carriage 
Order 


Request byte from 
controlling system. 


Count done ? 


Terminate operation 
at end of sector. 


Fast Access 
Memory (FAM) 
full ? 


Note: WRITE, CHECK-WRITE, SEEK, and 


HEADER WRITE are Data Out operations. 


Data In/Data Out Operations 


Request one byte 


from controlling 
system. 


Byte equal 
to zero ? 


Select 
indicated 
test mode. 


Count done ? yes 


Request second 
byte from con- 
trolling system. 


Set device type 
and device diag- 
nostic bit. 


Figure 7. Select Test Mode Order 
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Sequence of Activity 


On cylinder? 
no 
yes 


Clear address registers. 


Does Fast 
Access Memory (FAM) 
contain 4 bytes? 


yes 


no 
yes 


e 


Send bytes to 
address registers. 


Valid Seek address? 


yes 


Start heads moving 
to new cylinder. 


Order 
X'83'? no 


yes 


Enable interrupt to occur 
after device completes 
Seek operation or after 
Seek Timeout error. 


Figure 8, 


no 


no 
Count done? bok; 
no yes 
NN SH 
oN a“ 


Set sector 


unavailable 
flag. 


Seek Order 


Store two 
check bytes 
in FAM. 


Sector 
pulse ? no 
Store difference 
yes in FAM. — 


Read angular 
position 


counter. Transfer FAM 


to memory. 


Store cylinder 
address in 
FAM. 


Store head 
address in 
FAM. 


Store sector 
address in 
FAM. 
yes 
Store device 
Clear 
faults. 


configuration 
in FAM. 


Store device 
status in FAM. 


Store two 
fault bytes 
in FAM. 


Store two seek 


modifier bytes 
in FAM. 


Figure 9. Sense Order 
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HEADER 
WRITE 
no 


yes 
Set sector - 
yes unavailable flag. 


no 


Seek 
Timeout 
error? 


yes 


Head 
address 
>18? 


no 


mark 


received from storage 
ne device? 


es 
Increment address register 
by one sector. 
Request byte from Fast 
Access Memory (FAM). 
no 
Write header byte 
into storage device. 
Increment byte count. 


Byte 
count equal to 
eight? 


U.E 


aN 
NA 


Write a byte 
of all zeros. 

j Increment 
byte count. 


Byte 
count equal to 
eight? 


yes 


Write header 
check bytes. 


no 


yes 


Write header 
check bytes. 


Ki > Count done ? 
yes 
equal to zero. 


Head 
address 
>18? 


i Set sector aN 
unavailable flag. UE. 
NY 


no 


Figure 10. Header Write Order 
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HEADER 
READ 


no 


Seek 
Timeout 
error? 


On sector 
pulse ? 


Set sector counter equal 
to current sector address. 


Set sector 
unavailable flag. 
no 
lye 
; U.E, 
Increment address register KS 
by one sector. 


Read header byte 
from storage device. 


Header Set error flag. 
oO 


Store byte in Fast Access 
Memory (FAM). 


ow” 
Set data I a 
yes overrun flag. << 
no 


Byte fo 
Increment byte count. Count done? count equal to ae 
‘ no 
eight? / 


yes 


Byte 
count equal to 
eight? 


no no 


yes 


Set byte count 
equal to zero. ofN 
Ua Es. 
eee . NY 


Figure 11. Header Read Order 
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26 


Note: Verification does 
not include sector address 
until after addressed 

sector is found. 


Sequence of Activity 


Position Prior to WRITE, READ, 


Verification and CHECKWRITE 


no 


Seek Timeout error ? 
yes 


Set data byte count 
equal to zero. 
Read next header. 


Header error 
check byte, verification 


Set appropriate 
yes flag. 


or flaw)? 


Loa 
UE. 
Yo 7 
Is this il 
the addressed __» 


es 
sector ? y 


Set verification error flag. 


Increment address 
register by one sector. 


Exit to READ, WRITE, es oe 
or CHECKWRITE. 


Figure 12, Position Verification 


6.4 


Head 
address 
>18? | 


yes 


Read headers. 
(Note: See "Position 
Verification" flow chart.) 


Access Memory (FAM) 


yes no 


yes 
Request byte e L \ 
from FAM, \ ore 


Write data byte 
into storage unit. 


Write a byte 
of all zeros. 


Increment 
byte count 


Increment 
byte count. 


Byte 
count equal to 


1024? 


Byte 
count equal to 


1024? 


yes 


Write check bytes. 


i 


yes 


yes 


no 


Set sector — 
unavailable flag. 


Set data 
overrun flag. 


, Figure 13. Write Order 


“oN 
UE. 
NN 4 


7 ™N 


TEs 


N74 
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Head address >18? 


Set sector 
yes unavailable flag. 


Read headers. 
(Note: See "Position 
Verification" flow chart.) 


Access Memory (FAM) Count done? 


yes 
no 

Take byte \ 
(4) 


Read byte from 
storage device. 


Compare 
with FAM 
byte? 


Increment 
byte count. 


Byte 
count equal to 


1024? 


Set Check-write 
error flag. 


ls 
Check-write 

error flag 
set? 


yes 


yes 


Figure 14. Check-Write Order 


Sequence of Activity 


“vs 
Bae 
N74 


Set data 
overrun flag. 


READ 
1 OR 2 


Head address > 18°? 


no 


Read headers. 


(Note: See "Position 
Verification" flow chart.) 


Ged yes 
no 
Read byte from 
storage device. 


Store byte in Fast 
Access Memory (FAM). 


{ 
, Gon wid> ye 
no 


Increment byte count 


| Count done? 
| | yes 
| no 


Byte 
count equal to 
1024 ? 


no 


yes 


Check 


ae byte error 


Figure 15. 


v ; 
ilable flag. yanks 
yes unavailable flag ae, 
Set data . ee 
overrun flag. — 3 
Byte ™ 
count equal to Lt ) 
1024? a / 
yes 
N 
Oy E 
\ 
a 
Read Orders 


Sequence of Activity 
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Condition 
Release 
Interrupt 


Modifier bit 
set ? 


Set release 
interrupt mark 
flip-flop. 


Reset release 
interrupt mark 


Figure 16. Condition Release Interrupt Order 


PROGRAM 1/0 INTERRUPT ENVIRONMENT 


The program establishes an I/O interrupt environment by 
setting the flags in the second word of the IOP command 
doublewords in the command lists, and by using specified 
timeout delays within software timeout routines. The rec- 
ommended software timeout delay for disk operations is a 
minimum of 2 seconds. 


The following flags must be set: 


ICE Interrupt at Channel End. Set only in last 
command of a command list. 


IVE Interrupt at Unusual End. Set in all commands. 

HTE Halt on Transmission Error. Set in all 
commands. 

SIL Suppress Incorrect Length. Set whenever the 


size of data transferred is not equal to the 
normal size for the operation (e.g., a Write 
operation with a byte count other than 1024). 
Thus an incorrect length indication is inhibited 
from causing an IOP Halt and a subsequent 
"unusual end" I1/O interrupt. 


The IZC flag (Interrupt at Zero Byte Count) is not neces- 


sarily set. 


DISK SYSTEM INTERRUPT ENVIRONMENT 


The disk system interrupt environment comprises interrupts 
generated by the controller and the device. 


CONTROLLER-INITIATED INTERRUPTS 


The controller generates two types of interrupts. The first 

is the result of an IOP-generated interrupt to indicate un- 

usual end, channel end, etc. The second type is device- Sars 
initiated and indicates Seek or Restore Carriage completed, 

device released, or attention required. The IOP interrupts 

have priority over device-initiated interrupts. The controller 

"busy" condition has priority over a device interrupt. 


Interrupts are cleared by an AIO or HIO instruction to de- 
vice address X'F' or by I/O Reset. An AIO clears only one 
interrupt whereas the I/O Reset and the HIO with device 
address X'F' clear all interrupts by clearing all device in- 
terrupt flags. An HIO to the device initiating the interrupt 
clears the interrupt. 


The various interrupts are discussed individually in the sub- 
sequent sections. 


IOP-INITIATED INTERRUPT 


The IOP can set an interrupt call (CIL) by setting data bit 0 
ina terminal order. This interrupt is cleared by an AIO or 
HIO instruction or by I/O Reset. 


ATTENTION INTERRUPT 


A device initiates an attention interrupt by setting its atten- 
tion flag (status bit 7). If the controller is not busy, it scans 
the devices for initiation of a device interrupt. If the con- 
troller receives a TDV, TIO, HIO, or SIO instruction for 
another device, the interrupt is temporarily removed until — 
the instruction is completed. An AIO or HIO to the initi- 
ating device clears the attention interrupt. 


a 
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RELEASE INTERRUPT 


A device initiates a release interrupt when it is released by 
another controller. The controller does not respond to any 
release signals from devices unless the Condition Release 
Interrupt order first enables the release interrupt logic. If 
a TIO, TDV, HIO, or SIO instruction is issued to another 
device, the interrupt call is temporarily removed until the 
instruction is completed. An AIO or HIO to the interrupt- 
ing device clears the interrupt. 


ON-SECTOR INTERRUPT 


An on-sector interrupt indicates one of two things: a de- 
vice has completed a Seek order or a Restore Carriage order 
(bit 4 of AIO); or a Seek timeout has occurred (bit 6 of 
AIO). The device signals on-sector to the controller when 
the heads are not in motion and the head is accessing the 
sector prior to the one addressed. Before the controller will 
generate an on-sector interrupt for any device, it must re~ 
ceive a Seek or a Restore Carriage order with the modifier 
bit set. An interrupt call (CIL) is set at the start of the 
sector prior to the one addressed by the order and is dropped 
at the start of the next sector if not cleared by an AIO in- 
struction. The CIL is reinitiated the next revolution, how- 
ever. An on-sector interrupt is temporarily removed by a 
TIO, TDV, HIO, or SIO to another device. An AIO, HIO, 
or I/O Reset clears it. Please note that an AIO or HIO 
clears only the single interrupt, whereas I/O Reset also 
clears pending interrupts (CIL not set). 


DISK SYSTEM ERROR DETECTION ENVIRONMENT 


Logic is provided within the controller for automatic detec- 
tion of errors in the data flow in and out of the controller. 
Included are IOP parity check, device address parity, read 
check character bytes, and file address verification. 


IOP AND CONTROLLER PARITY CHECKS 


Odd parity is generated and checked for data transfers. 
Both the IOP and the controller can drive odd parity and 
perform parity checking. On the Sigma 8 and 9 computers, 
parity checking is performed on all data transfers, single- 
and four-byte. However, on the Sigma 5-7 computers, 
parity is checked only for these specific data: seek address, 
sense bytes, headers, and single-byte transfers. 


Generally, this is what occurs (qualified by the Sigma 5-9 
restrictions just cited); The controller drives odd parity for 
all data-in transfers to the IOP for single- and four-byte 
transfers, and drives parity checking on all transfers initi- 
ating from it. Odd parity is checked for all data-out on 
the single-byte interface. If the IOP drives the parity 
check, the check includes all data transfers on single- or 
four-byte transfers. "Transmission error" indicates data 
parity errors and "unusual end" indicates order and address 
parity errors. 


DEVICE ADDRESS PARITY 


The controller generates odd parity for the four device ad- 
dress lines; the device goes "not operational" if a parity 
error is detected. | 


READ CHECK CHARACTER BYTES 


A two-byte check character is written at the end of each 
record (header or data). The controller initially computes 
and inserts these check characters, and recomputes and com- 
pares them with those read on any Read or Check-write or- 
der. "Transmission error" indicates any check byte error on 
data records, and "unusual end" indicates any check byte 
error on headers. 


FILE ADDRESS VERIFICATION 


File addresses are verified by several means. During each 
Seek, the controller automatically reads back from the de- 
vice and verifies the file address (cylinder, head, track, 
sector) and any differences. It verifies the angular position 
of the heads for multiple sector-record Read and Write orders. 
The controller also verifies file address by comparing it with 
that read in the header. Any file address verification error 
results in order termination with "unusual end". 


1/0 FAULT DETECTION AND RECOVERY ACTIONS 


The program can determine whether a disk pack I/O opera- 
tion was completed successfully or terminated due to a fault 
condition by evaluating the status response and condition 
code bits obtained by issuing AIO and TDV instructions 
after an I/O interrupt. 


The program must perform tests to determine whether the I/O 
interrupt is due to a device-generated interrupt or a channel 
end or unusual end interrupt — the two are mutually exclu- 
sive. If the status bytes received with an AIO do not indi- 
cate a device-generated interrupt, assume a channel end or 
unusual end interrupt. 


TESTS FOLLOWING DEVICE 1/0 INTERRUPTS 


The following tests can be performed after receipt of a de- 
vice interrupt to determine the type of interrupt: 


1. Seek timeout error interrupt. If AIO status bit 6 is set, 
the device has generated the Seek timeout error inter- 
rupt as a result of a hardware malfunction during head 
movement. Use recovery action 3 (see "Recovery 
Actions" later in this chapter). 


2. On-sector interrupt. If AIO status bit 4 is set, the 
device has generated the on-sector interrupt to indicate 
the addressed sector's minimum access position time, or 
to indicate head motion completion for a Restore Car- 
riage order. 
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3. Release interrupt. If AlOstatus bit 2 is set, the device, The testing described in this and the preceding section is 
operating in dual access mode, has generated an inter- applicable to all peripheral devices. If no error is found, 
rupt after its release by the other controller. device-dependent fault testing (see below) is not required. 


4. Attention interrupt. If AIO status bit 1 is set, the de- 

vice has generated an interrupt to inform the system 

that it has been started up and is ready to be connected PRIORITY OF DEVICE-DEPENDENT TESTING 

to the disk system. 
One or more status bits may be set when a fault occurs. 
Thus to properly describe the fault, testing must be per- 
formed in a predefined sequence. Table 9 shows the test- 

TESTS FOLLOWING CHANNEL END OR UNUSUAL ing sequence priorities. 
END INTERRUPTS 


Before performing device-dependent testing, the program 
must issue a TIO instruction to determine the state of the 
device. In case of software timeout, the TIO has already 
1. CCl and CC2 are zero for an AIO instruction. been issued. 


The following tests can be performed after receipt of a 
channel end or an unusual end interrupt: 


2. AIO status bits 8, 9, and 12 are zero. 
3. CCl and CC2 are zero for a TDV instruction. 
4 


The recovery actions annotated in Table 9 are more thor- 
oughly described in the section subsequent to the table — 


- TDV status bits 8 through 15 are zero. "Recovery Actions". 


Table 9. Xerox Removable Disk Storage System Testing Sequence 


Read 1, 2, Write, or Checkwrite 


Condition Release Interrupt 


Sense, Release, 
Restore Carriage 


Sequence and Summary Description Condition Code, Status Response Bits, and Detailed Information Recommended Corrective Action 


Step 1. TDV CCI, CC2 = 01 


See recovery action |. 


= 
te) 
® 
ac 
— 
o 
0 
e] 
a 
<= 
X 


Perform if TDV CC1,CC2 400, in- Test mode. The controller has been placed in test mode due toa 
dicating TDV condition code error. hardware failure or a programming error. 


Ed 
x< 


TDV CCI, CC2 = 10. See recovery action 2. 


Ste ek ; See recovery action 4. 
Busy. The controller indicates it is currently "busy" with a aaa 
device other than the one addressed; this is the result of a hard- 
ware failure. 


See recovery action 3. 


ee 


2 


Step 2. . TIO 5,6 - 01. See recovery action 1. 
Perform if TIO 5,6 #00, indicating Not operational. The controller has sensed that a power shutdown 
controller is not "ready" immediately | is in progress or that its control memory does not respond correctly. 
following an I/O interrupt. 

TIO 5,6 = 10. 


See recovery action 2. 


See recovery action 4. 


See recovery action 3. 


Not defined. 


TIO 5,6 =11. 


See recovery action 2. 
; ‘i ed, ecovery action 4. 
Busy. The controller failed to return to the "ready" condition. peeiyecoveryactig 
This can occur if a command list is coded for multiple interrupts 
or if hardware malfunction prevented the controller's return to 
the "ready" condition. 


See recovery action 3. 


: 
a 
al 


ee ee 
Cee 
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Table 9. Xerox Removable Disk Storage System Testing Sequence (cont. ) 


Perform if TDV 7 #0, indicating 
header parity error. 


Header parity error. The controller has detected a parity error in 


the header during address verification. 


ir L 
3 
gc ~~ 
F: 
=) 
E o) 
ke 5 
g o 
o + 
go c 
fa|2 || 2| 2 
2s\d/“] 2] s 
~=!| o mn - - 
al22/2)3) 3/3 
o| 8 | o 
Sequence and Summary Description Condition Code, Status Response Bits, and Detailed Information BIRO] = | & | F| Z|] Recommended Corrective Action 
Step 3. TIO 1,2 =01 X|X 1X |X |X |X See recovery action I. 
Perform if TIO 1,2 400, indicating Not operational. The device has detected a hardware malfunction 
device is not "ready" immediately or a controller-to-device communication malfunction and has dis~ 
following an I/O interrupt. allowed further operations to be performed on the device. 
TIO 1,2 = 10. X|X 1X 1]X 1X |X See recovery action 1. 
Unavailable. The device is unavailable for usage through the 
addressed controller during dual access hardware configuration. 
Its unavailability is the result of its being presently reserved by 
the other controller of the dual access pair. 
Note: This could be a normal response if a dual-CPU system 
is not using interrupts. 
T10 1,2 =11. ta See sScovely action 2. 
. : , ane : ti 
Busy. The device did not return to the "ready" condition. This PEE nyt 
can occur if a channel command list is coded for multiple interrupts; See recovery action 3. 
if a hardware malfunction has prevented the return to "ready"; or if 
the I/O interrupt was other than an on-sector interrupt for a Seek 
or a Restore Carriage order. 
=e ne athe 
. ” ° ° ti e 
Perform if TDV 10,11, 12, or Memory address error. This error can occur because of programming ie peciecovelyaction4 
a. 13 40, indicating IOP operation errors or hardware malfunction. 
error. 
mae FCC a 
[OP memory error. This error is due to hardware malfunction. ele emeerenen: 
ov Fi er 
IOP control error. This error is due to programming errors or hard- Rei ae les nde recovery ceHient: 
ware malfunctions. 
TDV 10 = 1. x} x [x] | | | Seerecovery action2. | See | See recovery action2. | action 2. 
Transmission memory error. This error is due to hardware malfunction. iene | 
Step 5. TDV 4=1]. X|X |X |X 1X |x See recovery action 2. 
Perform if TDV 4 40, indicating IOP parity error. The controller has detected a data parity error 
parity error. during the data-out phase of a seek operation. 
a Se Pe [erin 
, ; : S tion 4, 
Perform if TDV 5 40, indicating Operational error. The controller or device (or both) has detected [XX |X| See recovery actions. | 
an operational error. an operational error as a result of a hardware malfunction. X ec 
staat X[X |x| Seerecovery actions, 
Perform if TDV 2 #0, indicating Programming error. The controller has detected one of these: an _ A ore Teeovery.ccllen 
a programming error. invalid order; an illegal address or cylinder overflow; the arm in Xx See recovery action 3. 
motion at the start of a seek operation; a byte count other than 
four for a seek operation; a byte count unequal to a multiple of 
the header size for a header operation; or an incorrect use of 
device address X'F'. 
Step 8. TDV 3=1. X | X See recovery action 6. 
Perform if TDV 3 40, indicating Write-protect violation. The controller has detected that a write 
a write-protect violation. operation was about to be performed on a write-protected surface 
and has aborted the write operation. 
Step 9. TDV 7 =1. See recovery action 2. 
, 
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Table 9. Xerox Removable Disk Storage System Testing Sequence (cont. ) 


Step 10. TDVé6 1. 


2 
re 
z 
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Perform if TDV 6 40, indicating 


Verification or seek timeout error. The seek address does not compare 
seek timeout or verification error. 


with the header address prior to the start of a read, write, check-write, 
or header read operation; or the on-cylinder situation has failed to 
occur during head movement. 


Step 11. TOV 1=1. 


Header flaw byte. A flaw byte has been detected in the header and 
the read, write, or check-write operation has been aborted. 


TDV9=1. 


See recovery action 5. 


See recovery action 6. 


hed See recovery action 2. 


See recovery action 4. 


Perform if TDV 1 40, indicating 
a header flaw byte was detected. 


Step 12. 


Perform if TDV 9 40, indicating 
transmission data error. 


Transmission data error. The controller has detected a data error that 
may be due to a check-write comparison error, an IOP parity error, 

a data overrun (rate) error, or a data check byte comparison error. 

The IOP can set this error if it detects a data parity error during data-in, 


Step 13. TDV 8 =1. 


See recovery action 2. 


See recovery action 4. 


See recovery action 6. 


to indicate the specific failure for which the device-dependent fo 
status checking was evoked. Consider this to be a hardware e recovery action 


Perform if TDV 8 #0, indicating 


Incorrect length. The controller has detected that the byte count 
incorrect length error. 


is not the nominal byte count for the operation being performed. 


Step 14. 
passed.) 


(Steps 1 through 13 Status inconsistent error. The device-dependent status has failed 
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status malfunction. 
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RECOVERY ACTIONS or more reread operations (not to exceed 10). A hard read 
error is a read error that cannot be corrected during as many 
Table 10 annotates the recovery actions for the channel end as 10 reread operations. Similarly, errors can be considered 
and the unusual end interrupts by I/O order. To determine write errors only if a Write operation is immediately followed 
the correct recovery action, first determine the order (Seek, by a verification by reading; only if such verification is suc- 
Sense, etc.). You may assume that for multisector opera- cessful can the data be considered error-free. A soft write 
tions the failing sector can be determined and recovery error is one that can be corrected after one rewrite, whereas 
action taken on the appropriate sector. Therefore we rec- a hard write error is one that cannot be corrected by one 
ommend ‘that read operations use the Read 1 order (order rewrite — it is an irrecoverable error. (See "Irrecoverable 
code X'12') to ensure that a failure is reported immediately Errors", following this section.) A seek error is declared if 
following the failing sector. If the Read 2 order (X'02') is a carriage positioning operation is not completed within 
used, the fault indications may be attributable to a number 3 seconds. The verification of proper cylinder location is 
of sectors, and for this reason an alternate fault testing se- done in the controller during a subsequent Read, Write, or 
quence may be necessary. Check-write operation. 
In the case of command lists, a sequence of operations are The recovery actions are described forthwith: 


performed before the I/O interrupt occurs and status is made 


: , Action Description 
available. When an error occurs, the command list sequence eee, ae 


is terminated and the failing order can be determined from ] Abort — operator intervention. The current opera- 
the TIO current command doubleword address. The pro- tion must be aborted and operator notification 
gramming system then has its choice of repeating the entire given that the device or controller (or both) has 
command list or rebuilding the command list (bypassing all become "not operational", "unavailable", or entered 
nonfailing surface operations) to repeat the operation that the test mode. The operator must then perform the 
failed. appropriate action before returning the controller 


and device to the "operational" state. 
Perhaps it would be beneficial to give a few error defini- 


tions at this point — "soft" and "hard" read and write errors 2 Order retry — program recovery. Issue an HIO 
and seek errors. An error can be considered a read error instruction (in the case of controller "busy") and 
only if the data were read correctly at least once after they retry the operation. Repeat the HlO-retry order 
were written. A soft read error is an error that occurs dur- sequence 10 times before considering the fault 
ing aRead operation and can be corrected as a result of one irrecoverable. 
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Action 


3 


Description 


Order retry after Restore Carriage — program re- 
covery. Issue an HIO instruction (in the case of 
controller "busy") followed by a Restore Carriage 
order to reestablish head positional reference. 
Then retry a Seek operation followed by the orig- 
inal operation (if it was not a Seek). Repeat this 
sequence 10 times before considering the fault 
irrecoverable. 


Order retry after Seek — program recovery. Issue 
an HIO instruction (for controller "busy') followed 
by a Seek order to reestablish the surface address 
and head position. Then retry the original order. 
Repeat this sequence 10 times before considering 
the fault irrecoverable. 


Alternate surface selection — program recovery. 
Issue a Header Read order to determine the assigned 
alternate surface address. This action is, of course, 
appropriate only when the header area is used for 
alternate assignment. | 


Program notification — no recovery required. The 
program is notified of the following occurrences 
for which a recovery action is not necessarily 
required: 


e Awrite-protect violation occurred on a write- 
protected surface. 


@ A header flaw byte was detected during a 
Header Read operation. 


e = An incorrect length indication appeared dur- 
ing an operation for which partial information 
transfer was acceptable. 


FAULT LOGGING 


Part of the fault recovery procedure is the obtaining and 
logging of additional failure indicators using the Sense op- 
eration. The sense data comprises 16 bytes of status and 
fault information. Place bytes 0 through 15 in the error log 
along with the I/O instruction status. The two reasons for 
obtaining and logging the sense data are 


1. The specific failure information provided in sense 
bytes 8 and 9 is valuable for hardware repair. The 
physical device on which the faults occurred, regard- 
less of the device's logical address, can be determined 
from byte 5. 


2. The Sense order with a byte count of 16 resets these 
failure indicators that otherwise would remain set after 
the first occurrence of each fault. 


If Sense operations are performed only occasionally after 
faults, the Sense information could contain misleading, past 
history, failure data. 


IRRECOVERABLE ERRORS 


To discuss the specific action to take after an irrecoverable 
error falls outside the scope of this manual, for the action 
varies with the order and the user's application. For 
instance, the system may tolerate sense failures, whereas 
read failures can cause an action range from job abortion 
to system shutdown. Irrecoverable write failures may 
merely require the choice of another surface area and the 
disallowance of further operations on the failing sector (or 
sectors) to remedy the situation. 
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9. OPERATIONS 


CONTROLS AND INDICATORS 


The disk drive storage unit houses two types of controls 
and indicators: one group for use by the operator, and one 


OPERATOR CONTROL PANEL 
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group for troubleshooting and preventative maintenance 
use by a customer service engineer (CE). The following 
sections describe the two groups; the locations of all con- 
trols and indicators are pictured in Figure 17. 


Cary Logic Number Plug 


TEST POINT PANEL 


DC POWER SUPPLY 
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Figure 17. Location of Disk Storage Unit Controls and Indicators 
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OPERATOR CONTROL PANEL 


The operator pushbutton controls and lighted indicators are 
located on a horizontal panel on the front of the disk stor- 
age unit (see Figure 17). The controls and indicators serve 
these functions: 


Control or Indicator Function 
START When all conditions for starting 


switch/indicator disk spin (see below) are satisfied, 


depression causes the disk to start 
and the backlight to illuminate. 
Depression whilethe disk is spin- 
ning extinguishes the backlight 

and causes the disk to stop. 


These are the conditions for start- 
ing disk spin: 


e@ Disk pack is installed. 
e@ Disk pack cover is removed. 


e@e Storage unit top cover is 
closed. 


e Carriage is retracted. 

e = Air flow is normal. 

@ Temperature is normal. 

e AC and DC power are ON. 
Unit ready and 


unit number 
indicator 


Illumination of this backlight in- 
dicates that the disk storage unit 
is ready to transfer data (i.e., the 
spindle has reached the required 
rotational speed and the heads are 
loaded). This indicator may be 
blank, or (optionally) a numbered 
lens may be inserted to show the 
physical device address (0-14). 


MAINTENANCE 


indicator 


Illumination of the MAINTENANCE 
backlight indicates that the disk 


storage unit is operating off-line. 


The unit may be taken off-line by 
the Field Test Exerciser (FTE), or 
by setting the LOCAL/REMOTE 
switch on the DC power supply 
panel to the LOCAL position. 


WRITE PROTECT 


switch/indicator 


IIlumination of the WRITE PRO- 
TECT backlight indicates that the 
device is prevented from writing 
on the disk pack. Alternate action 
switch. Depression inhibits writing 
on the entire pack. Depression 
while the pack is write-inhibited 
releases the write inhibition. 


Contro! or Indicator Function 
FAULT Illumination of the FAULT back- 


switch/indicator light indicates that a fault condi- 


tionhas occurred and must be cleared 
before the device will become op- 
erational. Momentary depression 
causes the following actions: 


@ Resets any nonpersistent fault 
condition. 


e@ Resets the device release flag 
bit if it is set. 


e@ Causes the device to report 
"not operational" during the 
duration of the depression. 


e Terminates any function cur- 
rently in progress. 


Logic Number Plug This interchangeable plug-in de- 
vice assigns the disk alogical unit 
address. Unit addresses 0 through 


14 are available. 


CE MAINTENANCE PANELS 


The test point panel, AC power supply panel, DC power 
supply panel, and the main breaker box are located inside 
the rear panel of the disk drive unit (see Figure 17). The 
operator is only concerned with the main UNIT POWER 
circuit breaker, and the circuit breakers and LOCAL/ 
REMOTE switch on the DC power supply panel. See "Disk 
Drive Power Turn On" for a description of their settings in 
that procedure. 


OPERATING PROCEDURES 


The following sections describe the day-to-day operations 
on the disk controller and disk drives, and the procedures 
for taking care of the disk packs. 


Note: Disk packs must be initialized before they can be 
used. See, for example, the discussion of volume 
initialization in the Xerox UTS/SM Reference 
Manual, 90 16 74, 


DISK PACK INSTALLATION 
This is the procedure for installing a disk pack: 
1. Open the top door on the disk drive. A spindle lock 
mechanism will be activated when the door is opened. 


This locking mechanism holds the spindle stationary 
while the disk pack is being inserted. 
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2. Lift the disk pack by the top canister handle. Remove 
the bottom cover of the canister by squeezing together 
the parallel plastic flanges in the center of the bottom 
cover. Set the bottom cover aside. 


3. Carefully position the disk pack onto the spindle. 


4, Turn the top canister handle clockwise until you feel 
a positive stop. 


Note: Should the canister release early from the disk 
pack, continue turning the canister handle 
until you do feel the stop. 


5. Carefully lift the top canister cover clear of the disk 
pack and rejoin it with the bottom canister cover. 


6. Close the top door on the disk drive. 


7. Enter the disk pack identifier in the disk pack usage 
log. 


SYSTEM POWER TURN ON 


To power-on the entire removable disk system, perform both 
the controller power turn on procedure and the disk drive 
power turn on procedure described below. Note that turn- 
ing on the power of an individual disk drive or controller 
ought not affect the rest of the removable disk system. 


CONTROLLER POWER TURN ON 


This is the procedure for turning on the power of a disk 
controller: 


1. Open the front door on the controller and swing open 
the swing frame. 


2. Set the PT38 power supply circuit breaker (CB1)to ON. 
3. Set the SET/RESET switch to SET. 
4. Set the CABINET POWER circuit breaker to ON. 


5S. Set the appropriate CONTROLLER POWER circuit 
breaker to ON. Now the controller fans will come 
on and the power supply AC lamp will light. 


6. Close the swing frame and set the controller VOLTAGE 
MARGIN switch to NORM. 


7.. Set the POWER switch on the maintenance panel to 
REMOTE. When the remote power sequencing becomes 
enabled, the power supply DC lamp and the controller 
POWER lamp will light and the controller will go on- 
line if the MODE switch is in the ONLINE position. 


8. Set the MODE switch to ONLINE. 


9. Close the front door on the controller. 
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DISK DRIVE POWER TURN ON 


This is the procedure for turning on the power of a disk 
drive: 


1. Set the UNIT POWER circuit breaker (main breaker 


box) to ON. The blower fans will come on. 


2. Set the LOCAL/REMOTE switch on the DC power 
supply panel to REMOTE. (The switch is set to 
LOCAL if maintenance is to be performed on the 
unit. ) 


3. Set all circuit breakers on the DC power supply panel 
toON. The +20Y lamp will light, indicating the 
presence of the necessary voltage for the power up 
sequence circuit. 


4, Close the rear panel of the disk drive unit. 


DISK DRIVE START UP PROCEDURE 


The following recommended procedure is for starting up a 
disk drive: 


1. Perform the disk pack installation procedure (see "Disk 
Pack Installation"). 


2. If the FAULT indicator on the operator control panel is 
lighted, clear any existing nonpersistent fault by de- 
pressing the FAULT switch. However, for any indica- 
tion of a persistent fault, immediately notify your CE 
or supervisor. 


3. Depress the START switch to start the device; the 
START indicator will light. 


4. The disk drive will complete the first Seek ("first Seek" 
means the heads are automatically loaded to the flying 
position and then returned to track zero). The disk 
drive will generate an attention interrupt to signal the 
controller that a new disk drive and pack have joined 
the removable disk system. | 


This then is the sequence in which the disk comes up 
to operational force. If all conditions for starting the 
disk drive are present (refer back to the description of 
the START switch/indicator in "Operator Control Panel"), 
the mounted disk pack will come up to required rota- 
tional speed and the brush cycle will begin. In the 
brush cycle, the brush carriage simultaneously sweeps 
20 disk brushes (one brush per surface) across the disk 
surfaces to loosen any foreign material that may have 
accumulated there. When the brush cycle completes, 
the heads will load and the disk drive becomes oper- 
ational, providing the servo system is operational and 
there are no existing fault conditions. 


—~ 


In summary, then, these conditions must be satisfied before: 


the eonnonet can be allowed to operate the device: 


e ACand DC power are ON. 


e The heads have loaded, there are no fault eGnditions: 
and the first Seek is completed. 


e@ . The device is not in the maintenance mode. 


The START indicator will now light. 


DISK DRIVE STOPPING PROCEDURE 


This procedure stops a disk drive: 


1. Depress the START switch on the operator control panel 
to stop the rotating disk. 


2. Wait until the disk pack stops spinning ee melee 
_ 30 seconds) and the START indicator gos off. 


3. Open the top door of the disk drive. 


4. Remove the disk pack (see "Disk Pack Removal" below, 
for the appropriate procedure to use). 


5. Either close the top door of the disk drive or install a 
new disk pack and start up the drive again (see "Disk 
Drive Start Up Procedure"), as applicable. 


SYSTEM POWER TURN OFF 


To power-off the entire removable disk system, perform 
both the controller power turn off procedure and the disk 
drive power turn off procedure described below. Note that 
turning off the power of an individual disk drive or control- 
ler ought not affect the rest of the removable disk system. 


CONTROLLER POWER TURN OFF. 


This is the procedure for turning off the power of a disk 
controller: 


1. Open the front door on the controller and swing open 
the swing frame. 


2. Set the applicable CONTROLLER POWER circuit 
_ breaker to OFF. 


DISK DRIVE POWER TURN OFF 
This. procedure turns off the power of a disk drive: 
1. Depress the START switch onthe operator control panel 


and wait for the disk pack to eR spinning (START 
indicator is off). 


2. Set the UNIT POWER circuit breaker to OFF. 


DISK PACK REMOVAL 


This is the procedure for removing a disk pack: 


1. Observe that the disk pack is not spinning (START 
indicator is off). 


2. Open the top door on the disk drive. 
3. Separate the top and bottom canister covers. 


4. Carefully place the top canister cover over the disk 
pack so that the post protruding from the center of the 
disk pack is received into the top canister handle. 


5. Turn the canister handle counterclockwise until you 
hear a clicking sound. This sound means the disk pack 
is secured to the top canister cover. 


6. Carefully lift the canister and disk pack clear of the 
disk drive. 


7. Close the top door of the disk drive. 


8. Secure the bottom cover of the canister to the disk 
pack. 


CARE AND MAINTENANCE OF DISK PACKS 


Disk packs are precision devices. With proper care, 
handling, and storage they can have long and useful lives; 
and the installation can be assured of the integrity of the 
data recorded on them. 


HANDLING 
Always follow these precauilonswien peeling disk packs: 


1. Handle adisk pack with the canister (both top and 
bottom covers) attached, except, necessarily of course, 
while installing or removing the disk pack. 


2. Never touch a disk surface with your fingers, or with 
pencils, clothing, or any other objects. 


3. Be especially careful when installing or removing a 
pack from a drive unit to avoid damaging the disks or 
pack hub by rough handling. 


4. Do not drop a disk pack. Misalignment of the surfaces 
with the heads most assuredly can occur. Should you 
drop a disk pack, immediately inspect it for damage 
(see "Inspection"). 


5. When stopping a disk drive (see "Disk Drive Stopping 
Procedure"), do not try to "help" thedisk to stop spin- 
ning by pressing on the top disk — wait until the disk 
stops by itself. 


6. Be especially careful to keep ashes, tobacco, and 
coffee away from disk packs; ashes, tobacco and 
sugar are prime sources of disk contamination. 


Operating Procedures 39 


7. Before using a disk pack, condition it to machine 
room temperature for a minimum of one hour. 


LABELING 
There are certain rules to follow in labeling a disk pack. 


1. Use only the center trim shield of the disk pack for 
labeling. 


2. Use only labels designed for use as disk pack labels. 


3. Do not use grease pencils, crayons, or pencils to write 
on labels; use ball point pens or felt tip pens. 


4. Write label identificationon a label before affixing 
it to the disk pack. In this way there is no danger of 
your bending the top disk from hand and arm pressure 
while writing on the label. 


5. Do not try to erase the information on a label to cor- 
rect it; remove the label and apply a new one. 


6. Do not put notes, markers, identification cards, etc., 
inside a disk pack. 


INSPECTION 


Note: Use only Model 7279 disk packs or packs that meet 
Xerox specifications. 


When a disk pack is received, and every time a disk pack 
is to be installed on a drive unit, the pack must be inspec- 
ted for possible damage. A damaged disk pack carn cause 
head-to=disk interference (a head crash), and because a 
pack can be used on any number of disk drives, a single 
defective pack or drive unit can spread a malfunction to 
all drives and packs. Use the following recommended pro- 
cedure to inspect a disk pack for damage before installing 
it on a disk drive unit: 


1. Remove the bottom canister cover and carefully set it 
aside. 


2. Turn the pack upside down and hold it level so that 
you can spin the pack freely inside the top canister 
cover; apply the spinning force to the center hub, 
not to the disk. 


3. While the pack is spinning, visually inspect it for ex- 
cessive up and down motion (runout) of any of the 
recording disks or the sector disk. If you do not 
runout, bring the defective pack to the attention of 
the CE or your supervisor. 


Caution: Under no circumstance allow the read/write 
heads to load on a defective disk pack; 
the heads will be damaged. 


4, If the pack passes visual inspection, install it on a 
disk drive unit and depress the START switch. 
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5. Listen as the cleaning brushes move across the pack. 
If you hear any noise, this means a brush arm is con- 
tacting a disk surface. Stop the pack and immediately 
bring the problem to the attention of the CE or your 
supervisor. 


6. Should the pack pass the brush test, continue as fol- 
lows: Asa final test after the heads have loaded, 
listen for any head“to=disk contact. If you hear con- 
tact, stop the pack immediately and notify a CE or 
your supervisor. 


Should the pack pass inspection, it can safely be used. If 
there is head-to-disk interferénce, under no circumstances 
install the pack on another disk drive or another pack on 
this same disk drive, for both the original pack and drive 
ray have sustained damage that can be passed to other 
packs and drives. 


USAGE LOG 


A log must be attached to each disk drive unit for identify- 
ing all packs that have been used on that unit. Because 
one defective pack or drive unit can spread damage to 
other units in an installation, it is important to check which 
packs have been used when a malfunctioning disk drive 
unit of a defective pack has been discovered. 


A log entry consists of at least these three items of information: 
pack identification, and date and time of pack insertion. 


CLEANING 


Disk pack canister covers and hubs, and disk drive shrouds 
and spindles must be checked frequently for contaminants 
and cleaned with 91 percent pure isopropyl alcohol and a 
lint-free cloth. This is the procedure for cleaning a drive 
unit shroud and spindle: : 


1. Stop the spindle motor. 
2. Open the top cover of the drive unit. 
3. Remove the disk pack (see "Disk Pack Removal"). 


4, Clean the shroud with the lint-free cloth slightly 
dampened with alcohol. Wipe the shroud to remove 
all dirt and smudges. Thoroughly wipe the spindle 
surface. 


5. After cleaning the shroud, use a padof adhesive-type 
tape to pick up any particles that were not removed 
with the dampened cloth. 


6. Make certain that all particles have been removed 
from the interior of the shroud by rewiping the shroud 
with the alcohol-dampened cloth. 


Only competent maintenance personnel (e.g., customer 
service engineers) must be allowed to clean disk pack 
recording surfaces. Thedisk surfaces need be cleaned only 
when the pack is suspected of being the source of errors. 


re HO . 


The procedure for cleaning a pack is available in the 4, 
appropriate customer service maintenance manual for the 
customer service engineer. 


STORAGE 


These precautions apply to the storage of disk packs: 
1. Always store disk packs flat, with the bottom canister 
cover installed. 


2. Replace cracked, distorted, or damaged canisters. 


3. Do not stack disk packs one upon the other; to do so 
increases the likelihood of their being dropped and 
therefore damaged. 


Do not store disk packs in direct sunlight or in 
areas exposed to magnetic fields from transformers, 
high current electric cables, or similar equipment. 
For high security storage, observe the same pre- 
cautions used for storing magnetic tapes or micro- 
film records. 


Keep the storage area free of dust and contami- 
nants. The computer room is the best environment 
for disk pack storage. If during storage (storage 
conditions, nonoperating, are 8 to 80 percent humi- 
dity with no condensation over a temperature range 
of -30° to +150°) packs are exposed to temperatures 
of less than 60° or more than 90°, recondition the 
packs to normal computer room environment for one 
hour before use. 
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